Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
The originates_from_local_legacy_unicast_socket function in avahi-core/server.c in avahi-daemon 0.6.23 does not account for the network byte order of a port number when processing incoming multicast packets, which allows remote attackers to cause a denial of service (network bandwidth and CPU consumption) via a crafted legacy unicast mDNS query packet that triggers a multicast packet storm.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Avahi avahi-core/server.c多播DNS拒绝服务漏洞
Vulnerability Description
Avahi是用于Linux的本地服务发现工具。 Avahi的avahi-core/server.c文件中的originates_from_local_legacy_unicast_socket()例程在检查入站的多播报文时没有考虑.sin_port的网络字节序列，avahi-daemon反射器在反射旧式单播mDNS通讯时会导致出现大量报文。反射器将初始的多播查询转发到其他接口，然后在同一接口接收回来(IP_MULTICAST_LOOP)，但没有将刚刚转发的查询识别为旧式单播报文，因此就处理为独立的查询，并
CVSS Information
N/A
Vulnerability Type
N/A